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PCT/DE2004/000567 and adds new claims 9-16. The new claims 
conform to U.S. Patent and Trademark Office rules and do not 
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Trademark Office rules or to correct informalities. As 
required by 37 C.F.R. § 1.121(b) (3) (ii) and § 1.125(c) , a 
Marked Up Version Of The Substitute Specification comparing 
the Specification of record and the Substitute Specification 
also accompanies this Preliminary Amendment. Approval and 
entry of the Substitute Specification (including Abstract) 
are respectfully requested. 



includes an International Search Report, dated October 6, 
2004. The Search Report includes a list of documents that 
were uncovered in the underlying PCT Application. 
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ELECTRICAL, DECENTRALIZED BRAKING SYSTEM IN A VEHICLE 

Background of tho Invent ion Field of the Invention 

The present invention relates to an electrical, decentralized 
braking system in a vehicle, and in particular to an 
electrical, decentralized brake-by-wire system for a four- 
5 wheeled motor vehicle. 

Background Information 

In brake-by-wire braking systems, which as a rule are not 
provided with a mechanical, hydraulic, or pneumatic backup 
system, particular emphasis must be placed on availability, 

10 i.e. a braking function, even in case of error. Brake-by-wire 
systems having a centralized brake pedal module are 
known descr ibed , for example — fro m , in the laid open print 
published German patent document DE 198 26 131 A4r, the VDI 
report no. 1641 (2001), " Error- tolerant Components for Drive- 

15 by-wire Systems," by R. Isermann, and the publication "Error- 
tolerant Pedal Unit for An Electromechanical Braking System, " 
by Stefan Stolzl, published in the year 2000 by VDI-Verlag, 
ISBN 3-18-342612-9. 

A main priority in systems having such a central module is the 
20 reliable acquisition of the actuation of the brake pedal (the 
parking brake will not be considered in the present context) , 
as well as the distribution of the information concerning the 
brake actuation to decentralized intelligent wheel brake 
modules. The reliability of such a system is ensured on the 
25 one hand by a diversified and multiply redundant sensor design 
( see , e.g., brake pedals SI to S3 according to Figure 3) and 
on the other hand by a redundant processor and communication 
design (see first and second communication bus 14, 14' between 
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central brake pedal module 15 and the four brake modules 10, 
each controlling a wheel 13) , with the boundary condition of a 
mult i -circuit on-board network. 

In addition, the communication device or communication system 
is required to have a deterministic characteristic, from which 
the use of time-controlled communication systems, such aSj_ for 
example^ FlexRay, TTCAN, or TTP, results immediately. In this 
context, the brake pedal module and the communication system 
must have a fail- safe operational characteristic. In order to 
meet the requirement of a fail- safe operational characteristic 
in the case of simple errors, the brake pedal module must have 
at least three redundant processors as well as three 
redundant, diversified if necessary, sensors for the service 
brake. At least two redundant communication channels are 
required for the communication system. 

Laid open print Published German patent document DE 199 37 156 
fti discloses an electromechanical braking system having a 
decentralized acquisition of the brake pedal actuation. This 
can be referred to as a distributed, decentralized pedal 
20 module functionality. 

Within this electromechanical braking system design, shown 
with reference to Figure 4, four diversified sensors SI to S4 
are provided for the acquisition of the actuation of a brake 
actuation device (not shown) , respectively determining for 

25 example the pedal path and the pedal angle. Each of the 

sensors SI to S4 is connected to exactly one wheel module 10 
having a device 11 for determining a braking demand. Wheel 
modules communicate with one another via a system bus 14 and 
exchange the required sensor information or data, and, 

30 parallel thereto, calculate functional algorithms, agreeing on 
a protocol in such a way that in each wheel module 10 the same 
data, i.e. sensor actual values and sensor/function status, 
are present, and identical decisions can be made. 
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Consequently, in this way a symmetrical,' decentralized system 
architecture is provided in which the required fail- safe 
operational approach of the central pedal module according to 
Figure 3 is here (i.e. according to Figure 4) reproduced via 
5 the redundancy of intelligent wheel modules 10, 11. However, 
if a common mode error now occurs in communication system 14, 
for example due to a mechanical wiring harness breakage in the 
area of the wheel housing caused by a foreign influence, e.g. 
during off -road operation, this will lead unavoidably to a 

10 total loss of communication, in particular given a bus 

topology of communication system 14. In such a case, each 
wheel module 10 will then have access only to one sensor 
value, which however will no longer be able to be sufficiently 
plauoibilizcd tested for plausibility . This can result in 

15 differing braking forces being applied to the different wheels 
13 of the vehicle, resulting in a yawing moment, and thus in 
pulling to one side of the vehicle. Already in the case of a 
single error, this represents a significant loss of safety, 
independent of the backup management strategy. 

2 0 Advantages — &€ — the — I nvent i on SummarY 

In comparison with the known oolution approach, the 
electrical, decentralized braking system having the — features 
e£ — Claim — 1- according to the present invention has the advantage 
that, even after a common mode error or after the occurrence 
25 of two simple errors, at least a part of the wheel modules can 
plauoibiligc test for plausibility of sensor values through 
comparison with at least one additional sensor value, thus 
ensuring safety against a second error. 

In this way, increased reliability and availability of the 
30 service brake is ensured in case of error, which is required 
in pure brake-by-wire systems without mechanical/hydraulic 
backup systems for a safe trip to a workshop. 

The underlying idea of the present invention is essentially 
that at least a part of the wheel modules can p lauaibilizc test 
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for plausibility of sensor values through comparison with at 
least one additional sensor value even after a common mode 
error or after the occurrence of two simple errors. 

In other words, an electrical, decentralized braking system is 
5 provided with: at least four sensors for acquiring the 

actuation of a brake actuating device; one brake module per 
brakable wheel of the vehicle for acquiring sensor data and 
controlling a braking device of a corresponding wheel; at 
least one first communication device with which all braking 

10 modules are connected to one another for the exchange of data; 
and an electrical connection device by which each sensor is 
connected at least to one brake module, the braking system 
having at least one additional communication device for 
receiving and/or exchanging data between at least two wheel 

15 modules of opposite sides of the vehicle. 

The subclaims — contain advantageous developments — and 
improvement 3 of the braking system indicated in Claim 1. 

According to a preferred development an example embodiment of 
the present invention , the second communication device is 
20 constructed identically to the first communication device, and 
each sensor is connected to a second wheel module of the 
opposite side of the vehicle. In this way, the necessary and 
reliable p lauaibi lization test for plausibility of the sensor 
values can take place via the additional duplex system of the 

2 5 two local sensors, even when a common mode error has occurred 

in the communication system, i.e., both communication devices 
or communication lines fail. 

According to a fur ther preferred dcvclopmcnt an example 
embodiment of the present invention , a front wheel module of 

3 0 one side of the vehicle is connected to a rear wheel module of 

the other side of the vehicle via a second communication 
device, and a front wheel module of the other side of the 
vehicle is connected to a rear wheel module of the one side of 
the vehicle via a third communication device for exchanging 
35 data. This has the advantage that after the occurrence of two 
independent simple errors affecting the communication devices, 
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or one common mode error (e.g. due to mechanical foreign 
influence in the area of the wheel housing) , a communication, 
and thus a plauoibiligation test for plausibility , of the 
sensor values is still possible between at least two wheel 
5 braking modules on opposite sides of the vehicle. 

According to a further preferred dGvclopmcnt example 
embodiment , more than four sensors, allocated to the wheel 
modules in pairs, are provided for acquiring the actuation of 
the brake actuating device. This is advantageous because it 
10 provides an additional increase in redundancy at a low 
expense . 

According to a further preferred dGvclopmcnt example 
embodiment , the communication devices are formed by serial bus 
systems. This advantageously permits the use of known 
15 communication platforms. 

Drawing 

Exemplary embodiments of — the present — i nvent i on are — shown in 
the drawings, — and arc explained in more detail — in the 
following descript ion . Brief Description jp f the Drawings 

2 0 Fig. 1 shows a schematic block diagram of a braking system for 

the — explanation of according to a first opceif ic example 
embodiment of the present invention-r^ 

Fig. 2 shows a schematic block diagram of a braking system for 
the explanation of according to a second specif ic example 
25 embodiment of the present invention^ 

Fig. 3 shows a schematic block diagram of a known convent ional 
braking system-; — asieL_ 

Fig. 4 shows a schematic block diagram of an additional 
known convent ional braking system. 

3 0 Description of — the Exemplary Embodimcnto Detailed Description 
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In the Figures 1-4 , identical reference ' characters designate 
identical or functionally identical components. 

Figure 1 schematically shows a block diagram of an electrical 
braking system that has four sensors SI, S2, S3, and S4 . The 
5 four sensors SI to S4 determine an actuation of a brake 

actuating device (not shown) , such aSj_ for example^ a brake 
pedal, that is actuated by a user of the vehicle. The four 
sensors SI to S4 all detect the same parameters, such as ± for 
example^ a pedal path and a pedal angle. Intelligent wheel 

10 braking modules 10, or wheel modules that which are provided 

with a device 11 for determining the brake demand or a desired 
braking (brake demand distribution) , are each connected with 
one of the four sensors SI to S4 via an electrical line 12 . 
Four wheels 13 are connected via to wheel braking modules 10 or 

15 wheel braking devices (not shown) connected therewith. 

Moreover, wheel braking modules 10 are all connected to one 
another via a communication device 14 that permits an exchange 
of data between intelligence — wheel braking modules 10. 
According to the 3pccif ic example embodiment in Figure 1, in 

20 addition a second and a third communication device 14' and 
14 ' ' are additionally provided, such that each of these 
communication devices 14 ' , 14 ' 1 connects a wheel module 10 of 
one side of the vehicle— — fa , e.g., right or left, with a 
wheel braking module 10 of the other side of the vehicle far — Rj_ 

2 5 in order to exchange data-; — and preferably e.g . For example, 
the front right wheel RV is connected to the rear left wheel 
LH and conversely, so that a diagonally opposite connecting is 
ensured. First, second, and third communication devices 14, 
14', and 14' ' are preferably a serial bus syste m, for example . 

30 Communication device 14 enables communication among all four 
wheel braking modules 10, and prcf crably also with additional 
control devices, such as ± for example^ ABS or VDM control 
modules. Via this communication channcl device 14, the pedal 
sensor values of sensors SI to S4 of the four wheel braking 
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modules 10 are exchanged. In addition, via the second and 
third communication devices, i.e., two braking circuit data 
buses 14 1 and 14 1 1 , the pedal sensor values of the two 
associated wheel braking modules 10VL (front left) , HR (rear 
5 right) ; VR (front right) , HL (rear left) are mutually- 
exchanged. This creates the possibility of (limited) 
monitoring, via the two braking circuit data buses 14', 14 1 ' , 
of the data sent via the first communication channc 1 devi ce 14. 

After the occurrence of two independent simple errors 
10 affecting communication devices 14, 14', 14 ' ' , or the 

occurrence of a common mode error, e.g. due to mechanical 
foreign influence in the area of the wheel housing resulting 
in breakage of the communication bus connections to the 
corresponding wheel, one communication device 14' or 14 ' 1 is 
15 thus still intact, so that a plauoibilization test of 

plausibility of the pedal sensor values of sensors SI to S4 is 
still possible between at least two wheel braking modules 10 
VR, HL or VL, HR. A system of this sort therefore has the 
possibility of switching off wheel braking modules 10 that can 
20 no longer communicate via a communication oyotG m device 14, 

14 1 , 14 ' ' , in order to avoid undesirable or unmatched braking 
forces, and thus a possible pulling of the brakes of the 
vehicle. This results in increased safety, both in the case of 
a simple error and also in the case of a double simple error, 

2 5 or of a common mode error. 

Figure 2 shows a schematic block diagram of an electrical 
braking system according to a second spe cif ic example 
embodiment of the present invention. The specific embodiment 
according to Figure 2 is distinguished from the specific 

3 0 embodiment explained with reference to Figure 1 essentially by 

the modified communication or connection structure between 
individual wheel braking modules 10. As in the first opecif ic 
embodiment, the braking system according to the second 
specif ic embodiment also has a communication device 14, 
3 5 prcf crably e . g . , a serial data bus, that connects all wheel 
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•I 

braking modules 10 having brakablc of wheels 13 to one another. 
In addition, a second communication linc device 14 1 , redundant 
to the first communication systc m device 14, is provided that 
likewise connects all wheel braking modules 10 to one another. 
5 Besides electrical connections 12 between sensors SI to S4 for 
acquiring the actuation of a brake actuating device (not 
shown) and wheel braking modules 10 according to Figure 1, in 
Figure 2 additional electrical connections 12' are provided. 
Electrical connections 12 1 run extend from a respective sensor, 

10 e.g. S2 , to a wheel braking module 10 that is situated axial ly 
next to the wheel braking module 10 that is connected to the 
electrical connection 12 of the sensor-; — e.g. S2 . That is, each 
of sensors SI to S4 is electrically connected, via connection 
12 and connection 12 ' , to two wheel braking modules 10 

15 situated on one axle. 

The decentralized system dcoign for acquiring a user brake 
request demand according to the second sp e cif ic example 
embodiment thus has exactly two of the four sensors SI to S4 
connected to each of the four wheel modules. Alternatively, 

2 0 aolutiono embodiments are also conceivable in which more than 
four physical pedal sensors SI, S2 , are allocated in 

pairs to the four wheel' braking modules 10. The advantage of 
the proposed second opecif ic example embodiment is grounded in 
the — fact that even after the occurrence of two independent 

2 5 simple errors or the occurrence of a common mode error in 

communication system 14, 14 ' ' , wheel braking modules 10 are 
indeed no longer able to communicate with one another, but a 
necessary and reliable plauoibilisation test for plausibility 
of the p e dal sensor values of sensors SI to S4 can nonetheless 

30 take place via the additional duplcx redundant system of the 
two local sensors SI to S4 . In this way, it is possible to 
safely brake wheel braking modules 10 that can no longer 
communicate with one another via a communication system 14, 
14 1 . This results in increased safety with respect to thc in 

35 the case of failure of the communication system, both in the 
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case in which two simple errors occur arid in the case of a 
common mode error . 

Although the present invention has been explained above on the 
basis of two preferred exemplary embodiments, it is not 
5 limited to these, but rather can be modified in a multiplicity 
of ways . 

Although it has been described for vehicles having two axles, 
the present invention can also be correspondingly carried 
ovcr applied to mult i -axle vehicles, such as A for example^ 

10 three-axle trucks. In addition, it is likewise conceivable to 
realize connections 12, 12' between sensors SI to S4 so as to 
be not only monodircctional unidirectional (as is indicated by 
the arrows in the drawings) but rather, in part icular e . g . , for 
the second specific example embodiment, so as to enable 

15 bidirectional communication, via a corresponding sensor, 
between the two wheel braking modules 10 connected to the 
sensor. Under this precondition, it would also be possible to 
realize a diagonal cross-connection of wheel braking modules 
10 via connecting devices 12, 12' between wheel braking 

20 modules 10, in contrast to the described connection of wheel 
braking modules 10 of one axle. 
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Abstract 



ABSTRACT 



Tho prcocnt — invention provider anA n electrical, decentralized 
braking system having : includes at least four sensors (SI — fee- 
S4-) — for acquiring sensing the actuation of a brake actuating 
5 device; one braking module ( 10 ) — for each brakablc vehicle 
wheel — ( 13 ) , for acquiring sensor data and for controlling a 
braking device of a corrcoponding the wheel — (13) ; at least one 
first communication device (1 4 ) — with which all braking modules 
( 10 ) — are connected to one another for the exchange of data; 

10 and an electrical connecting device ( 12 , — 12 1 ) — by which each 

sensor (SI — to S4 ) — is connected to at least one braking module 
( 1 0 ) , — wherein the braking oyotcm has ; and at least one further 
communication device ( 14 ' , — 14 ' 1 ) — for receiving and/or 
exchanging data between at least two whc - cl braking modules — ( 10 ) 

15 of different sides -irR-, — £r) — of the vehicle. 

Figure 1 
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